Bug 158359 - enforcing targeted policy stops hpoj from starting
Summary: enforcing targeted policy stops hpoj from starting
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: Fedora
Classification: Fedora
Component: selinux-policy-targeted
Version: 4
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Daniel Walsh
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2005-05-20 20:48 UTC by Alexandre Oliva
Modified: 2007-11-30 22:11 UTC (History)
0 users

Fixed In Version: 1.25.4-10.1
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2005-09-15 15:57:06 UTC
Type: ---
Embargoed:


Attachments (Terms of Use)
audit.log entries generated after setenforce 0, for service hpoj restart; service cups restart (1.85 KB, text/plain)
2005-05-20 20:50 UTC, Alexandre Oliva
no flags Details

Description Alexandre Oliva 2005-05-20 20:48:54 UTC
From Bugzilla Helper:
User-Agent: Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.7.8) Gecko/20050512 Fedora/1.0.4-2 Firefox/1.0.4

Description of problem:
A ptal (hpoj)-controlled printer doesn't work if targeted policy is in enforcing mode.  Upon service hpoj restart, /var/log/messages will contain messages such as:

ptal-mlcd: FATAL ERROR at ParPort.cpp:48, dev=<mlc:par:OfficeJet_Series_700>, pid=4471, e=1, t=1116621163         Access denied to parallel
port!

xojpanel doesn't work.  Oddly, if I start ptal-init to reconfigure the device, then mlcd starts successfully, and xojpanel works.

setenforce 0 followed by service hpoj restart; service cups restart enables the printer to work, logging to audit.log entries that audit2allow translates to:

allow cupsd_config_t devpts_t:chr_file { getattr ioctl };
allow ptal_t printer_device_t:chr_file getattr;
allow ptal_t self:capability sys_rawio;


Version-Release number of selected component (if applicable):
selinux-policy-targeted-1.23.16-1

How reproducible:
Always

Steps to Reproduce:
1.Boot up with hpoj enabled, configured to control a ptal printer

Actual Results:  The printer won't work.  Restarting hpoj logs messages indicating mlcd couldn't access the printer device.

Expected Results:  It should have been brought up successfully.

Additional info:

Comment 1 Alexandre Oliva 2005-05-20 20:50:02 UTC
Created attachment 114654 [details]
audit.log entries generated after setenforce 0, for service hpoj restart; service cups restart

Comment 2 Daniel Walsh 2005-05-23 20:47:12 UTC
Fixed in selinux-policy-targeted-1.23.16-7

Comment 3 Alexandre Oliva 2005-05-31 20:02:32 UTC
It's not in rawhide yet (we still have -6).  Any chance it could make to FC4?

Comment 4 Daniel Walsh 2005-05-31 20:35:31 UTC
I will start backporting as soon as fc4 is Released.  Everything is frozen.

Dan

Comment 5 Alexandre Oliva 2005-06-01 11:47:00 UTC
Not quite.  Major bugs and regressions can still be fixed, and broken printer
does qualify as a big one for me.  Anyhow, your call...  I'm away until Saturday
evening.


Note You need to log in before you can comment on or make changes to this bug.